Back to the CVE list
CVE-2025-0282 CISA KEV · Actively exploitedLinked to ransomware

Vulnerability in Ivanti Connect Secure

CVSS score

9.0

EPSS probability

%100.0

Risk score

18.0

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Reproduction of cve-2025-0282-ivanti_rce_reproduction

Public PoCSource updated: 24.07.2026 06:48:01

CVE-2025-0282

Public PoCSource updated: 08.06.2025 00:00:57

Ivanti Connect Secure, Policy Secure & ZTA Gateways - CVE-2025-0282

Public PoCSource updated: 24.04.2025 06:54:14

Exploit for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways

Public PoCSource updated: 21.07.2025 16:35:07

Ivanti Connect Secure IFT TLS Stack Overflow pre-auth RCE (CVE-2025-0282)

Public PoCSource updated: 24.12.2025 01:47:00

PoC for CVE-2025-0282: A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTA gateways

Public PoCSource updated: 27.08.2026 15:44:10

# CVE-2025-0282: Remote Code Execution Vulnerability in [StorkS]

Public PoCSource updated: 15.04.2026 07:46:46

CVE-2025-0282 is a critical vulnerability found in Ivanti Connect Secure, allowing Remote Command Execution (RCE) through a buffer overflow exploit.

Public PoCSource updated: 31.05.2026 09:52:58

Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE)

Exploit referenceSource updated: 15.04.2025 00:00:00

Nuclei: Ivanti Connect Secure - Stack-based Buffer Overflow

Exploit reference

https://cloud.google.com/blog/topics/threat-intelligence/ivanti-connect-secure-vpn-zero-day

Exploit reference

https://labs.watchtowr.com/exploitation-walkthrough-and-techniques-ivanti-connect-secure-rce-cve-2025-0282/

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-0282"